Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: SWaOycQ8qP1MBsnuU0Gc2b2jy5rhRf1imeVkHH70xBk=
Subject key identifier: 4C:DE:1B:37:3C:A1:DD:CB:D5:98:35:DA:9C:A1:B9:88:C5:C3:A2:5A
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 0197B8FD3D3176BE81B23D7853441F44B119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: 2F
Signing time: Sun 29 Jun 2025 00:01:33 +0000
Manifest this update: Sun 29 Jun 2025 00:01:33 +0000
Manifest next update: Mon 30 Jun 2025 00:01:33 +0000
Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=)
2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: U8Ecr7xx0SCmpQ0kBY1jXL6WA9j6gsY2GXZbJjlNvpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:3d:31:76:be:81:b2:3d:78:53:44:1f:44:b1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Jun 29 00:01:33 2025 GMT
Not After : Jun 30 00:01:33 2025 GMT
Subject: CN=4cde1b373ca1ddcbd59835da9ca1b988c5c3a25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:77:5b:14:52:36:9a:af:b3:e1:94:82:cc:
d6:0a:1f:f6:9f:6e:ee:73:37:12:9c:60:33:29:0e:
3a:7c:49:1c:98:d4:4b:6e:03:50:54:6f:be:e8:29:
c1:44:94:44:4d:7d:ff:7e:da:3f:85:26:b4:38:34:
2f:23:f8:6c:a2:b7:90:1b:bb:81:d5:a8:94:aa:1d:
f2:00:d1:cc:88:9a:56:2a:e5:fa:89:8f:c9:22:04:
4a:d6:f4:9b:15:02:fd:eb:26:55:3b:64:be:77:49:
42:bf:5e:7f:a3:4a:51:51:48:26:cf:ed:01:55:68:
66:b5:5e:48:97:f3:0d:6b:ad:34:36:dd:e0:fc:82:
41:44:77:f5:a2:f5:ba:77:55:4c:48:c3:97:b5:d9:
52:54:aa:8d:e9:96:91:ca:b5:66:e0:18:b5:7e:d7:
95:60:e6:a1:dd:e0:f4:cb:29:15:91:91:01:75:94:
9c:0f:44:c5:e2:87:5a:bd:e0:8b:88:21:1e:29:18:
64:11:23:9f:97:cf:1f:ea:03:db:6a:63:46:7f:00:
73:12:0f:be:a5:47:77:b3:5d:7c:df:d8:e6:6c:9f:
c7:b5:af:b3:7c:60:ef:70:a3:d5:f4:b9:64:15:1e:
5c:13:a4:1b:a2:4a:89:4b:77:5c:1f:51:b2:e1:4b:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:1B:37:3C:A1:DD:CB:D5:98:35:DA:9C:A1:B9:88:C5:C3:A2:5A
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0b:e9:50:59:9b:22:ba:72:8b:24:c3:0c:50:84:1c:03:55:
1c:c8:74:33:b9:95:6a:f5:24:38:85:d2:9c:57:a9:92:83:12:
d6:15:ec:c0:32:71:f8:79:9d:fe:c4:b3:6b:73:5c:be:5d:7d:
11:a2:17:9b:87:57:a3:13:58:1c:53:a1:2c:ea:86:7f:c5:4c:
71:4c:18:5a:29:e1:bb:d8:d5:6d:3a:06:15:3e:35:71:9c:52:
14:0f:a2:fc:a5:03:58:5b:c6:37:a9:fc:ca:40:46:cc:00:ed:
0e:e2:df:50:0b:63:83:8f:de:d6:6e:13:8a:72:fc:c2:ad:2b:
cb:2a:93:33:e4:23:75:2d:6d:20:ae:f7:de:df:97:f1:53:c6:
e7:5b:ae:c5:71:88:97:0f:fd:00:07:b4:6d:5c:26:4b:4d:b0:
38:9f:3b:21:82:ac:99:ab:3d:78:08:80:c4:c8:6d:e8:db:cf:
ae:3d:e3:45:2e:9b:a3:41:91:0e:97:62:10:b0:93:54:81:01:
17:8f:93:8d:53:c1:79:0a:e2:eb:fe:b5:1d:00:3e:00:1d:0f:
36:3e:e9:5e:60:3d:4f:28:09:55:71:9f:89:95:54:e0:ac:3c:
95:7b:bf:1c:da:8f:94:5f:8b:24:9e:58:cf:a8:f9:81:ff:6d:
26:b8:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:51 2025 by rpki-client